Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/pjuwfv3bsHCpq2bUzmpShMFHNQw.roa
File: pjuwfv3bsHCpq2bUzmpShMFHNQw.roa (raw, json)
Hash identifier: Hy8/ILbDAQXBmLpCF9rnEz7CfpQmiaJg4wOv9IAGHBw=
Subject key identifier: A6:3B:B0:7E:FD:DB:B0:70:A9:AB:66:D4:CE:6A:52:84:C1:47:35:0C
Certificate issuer: /CN=5d6c15ca903d7d25453eaeb5f724a04e3aa65908
Certificate serial: 019422FB1ABE429F5EA1FEE19DAC03AF5C9D
Authority key identifier: 5D:6C:15:CA:90:3D:7D:25:45:3E:AE:B5:F7:24:A0:4E:3A:A6:59:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/pjuwfv3bsHCpq2bUzmpShMFHNQw.roa
Signing time: Wed 01 Jan 2025 17:47:49 +0000
ROA not before: Wed 01 Jan 2025 17:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44432
IP address blocks: 79.134.226.0/24 maxlen: 24
79.134.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:1a:be:42:9f:5e:a1:fe:e1:9d:ac:03:af:5c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6c15ca903d7d25453eaeb5f724a04e3aa65908
Validity
Not Before: Jan 1 17:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a63bb07efddbb070a9ab66d4ce6a5284c147350c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:50:10:9d:24:eb:80:1f:18:7d:f3:6b:40:a9:
ed:d5:08:05:ea:c7:91:4c:4f:5a:74:64:2a:c0:40:
67:02:e9:b9:8b:2e:3c:37:90:52:63:73:49:6b:a0:
34:73:cd:94:6f:ea:49:5d:18:ae:0f:94:38:0f:bf:
b9:fe:b6:be:79:5b:b6:df:b2:a6:91:eb:32:09:cb:
67:23:60:53:c4:98:10:ab:33:67:b2:76:42:9d:b8:
78:bd:33:e0:ec:b0:fe:2d:3e:c0:bb:58:52:ff:0c:
5a:4c:0f:bd:4d:dd:80:5b:85:05:f5:f2:df:fd:b6:
5c:f9:c1:7c:75:4f:90:f8:60:18:5e:bb:5e:71:86:
ae:e2:80:d3:ec:4b:e0:6a:88:ad:4f:11:75:44:71:
6f:2a:53:f3:db:0e:2f:75:b9:47:a6:34:d6:d3:be:
47:b6:3e:4d:93:25:e2:41:93:6b:77:67:73:11:33:
da:bc:76:1c:c7:71:b2:5e:97:4b:7f:9f:d9:70:84:
9d:c5:fa:64:6f:a5:e4:e4:cc:28:aa:2f:ca:c7:c8:
94:8d:0d:9a:71:60:1f:cb:a7:ae:0a:e6:14:46:b8:
f2:d4:cf:b7:14:f6:03:44:e6:14:3a:47:67:63:05:
0f:1d:12:91:3f:51:c7:c5:31:39:79:5b:4c:a5:bc:
7b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:3B:B0:7E:FD:DB:B0:70:A9:AB:66:D4:CE:6A:52:84:C1:47:35:0C
X509v3 Authority Key Identifier:
keyid:5D:6C:15:CA:90:3D:7D:25:45:3E:AE:B5:F7:24:A0:4E:3A:A6:59:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/pjuwfv3bsHCpq2bUzmpShMFHNQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.134.226.0/24
79.134.242.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:ed:b2:87:4b:6e:64:24:60:c7:13:59:d0:06:10:e1:70:7c:
71:3f:35:db:1f:cd:b9:81:4e:07:d4:50:9c:92:40:6b:e5:7d:
bd:99:53:3b:28:f4:16:d0:39:d2:22:77:9b:f9:23:6e:b6:66:
31:9b:92:b8:2e:0e:56:fc:01:03:73:b4:cb:b4:75:95:bd:ab:
cf:81:1b:30:03:33:6c:b2:79:bc:c2:37:75:e7:98:d5:87:0d:
11:1a:a6:8e:31:07:3b:36:0f:e4:1b:42:cf:29:4c:4e:a6:df:
cd:dc:c8:3b:7e:84:30:b8:23:00:a1:05:d8:8d:ec:dd:81:61:
9e:3b:ca:68:29:40:cd:be:47:55:66:df:1a:07:4d:38:be:a5:
1f:cc:eb:b2:cb:8b:fd:ab:42:71:f4:49:aa:8a:4c:1e:a4:7c:
43:de:07:e5:1f:23:b1:f9:ff:fa:c5:6a:bd:43:ee:18:b0:79:
52:50:4c:81:e8:44:1d:a9:b7:fe:f0:50:b6:fb:31:8f:57:cf:
b3:8d:9c:1d:42:1a:fc:4e:c4:99:84:af:98:b9:37:b9:73:b1:
ac:0a:22:d2:3c:92:73:53:be:9e:a7:39:fe:36:5d:0f:50:d4:
c4:d5:13:4a:cd:83:ba:5e:20:ae:f5:b8:55:95:fe:e7:51:c0:
49:e2:de:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:31 2025 by rpki-client on console.sobornost.net